blob: 8171803357c91d64d53ffe92fd79f4c6a41e8a29 [file] [log] [blame]
id: GO-2024-2613
modules:
- module: github.com/1Panel-dev/1Panel
versions:
- fixed: 1.10.1-lts
vulnerable_at: 1.9.6
summary: Unauthorized Console access in github.com/1Panel-dev/1Panel
description: |-
If the user attempts to access a secure entry point and intercepts with Burp,
they can get access to the console page. This access does not return data nor
allow modification operations.
cves:
- CVE-2024-27288
ghsas:
- GHSA-26w3-q4j8-4xjp
references:
- advisory: https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-26w3-q4j8-4xjp
- web: https://github.com/1Panel-dev/1Panel/releases/tag/v1.10.1-lts
- fix: https://github.com/1Panel-dev/1Panel/pull/4014